Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/32332e3133372e3233362e302f32342d3234203d3e20343031363832.roa
File:                     32332e3133372e3233362e302f32342d3234203d3e20343031363832.roa (raw, json)
Hash identifier:          pnz+IQO1CEuhNm4Y4bgJIT8d8FdddoyY0ADK+d9YSVI=
Subject key identifier:   FF:BC:5C:18:5E:AE:3F:BF:4A:DF:F1:C0:F7:28:83:F5:93:B1:42:69
Certificate issuer:       /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Certificate serial:       75670FA30A274257A9A06F9E914C8844D6452EEA
Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/32332e3133372e3233362e302f32342d3234203d3e20343031363832.roa
Signing time:             Fri 30 May 2025 20:26:10 +0000
ROA not before:           Fri 30 May 2025 20:21:10 +0000
ROA not after:            Fri 29 May 2026 20:26:10 +0000
asID:                     401682
IP address blocks:        23.137.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:67:0f:a3:0a:27:42:57:a9:a0:6f:9e:91:4c:88:44:d6:45:2e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
        Validity
            Not Before: May 30 20:21:10 2025 GMT
            Not After : May 29 20:26:10 2026 GMT
        Subject: CN=FFBC5C185EAE3FBF4ADFF1C0F72883F593B14269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:65:c7:9c:1e:21:6c:b2:51:f7:b3:e1:48:96:
                    a2:8f:b6:cd:86:00:9b:5e:c2:4a:c0:ea:52:f9:d6:
                    d8:34:c5:8d:21:99:17:2a:12:d8:f4:c0:43:58:b5:
                    65:ad:bc:9c:c4:b1:a2:bf:23:c4:b8:1c:b8:17:89:
                    59:fa:37:c6:0d:50:7f:34:a4:80:c5:46:89:60:20:
                    7f:75:23:39:3b:e7:f0:30:93:1c:af:8c:7d:93:c7:
                    db:7f:6f:d0:5b:40:2c:f8:79:05:60:12:21:d3:34:
                    0e:7a:f9:08:c0:2c:33:7d:b3:00:42:a4:f1:6e:fa:
                    cf:44:3b:57:de:28:a0:dd:0e:60:54:07:82:b4:91:
                    2d:b0:60:14:f7:0d:3f:02:fb:24:7a:b1:91:60:9b:
                    97:21:7d:47:af:30:7f:cc:a1:06:91:b2:bc:08:95:
                    f6:41:1b:ad:ad:fb:60:c3:90:dc:4c:b7:c5:ea:93:
                    f1:1a:e2:e7:e7:23:37:a1:d6:70:6a:af:df:84:db:
                    5b:0d:a5:06:10:6a:8e:11:c3:d1:62:d0:eb:ba:d0:
                    5f:8c:fb:6d:cf:0e:dc:86:86:99:fe:02:b8:d6:8f:
                    e2:9f:55:e1:e4:49:d7:d7:80:45:2a:3d:62:97:46:
                    12:56:f2:8a:39:94:fa:c1:f6:df:b3:59:16:c2:30:
                    9e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BC:5C:18:5E:AE:3F:BF:4A:DF:F1:C0:F7:28:83:F5:93:B1:42:69
            X509v3 Authority Key Identifier:
                keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/32332e3133372e3233362e302f32342d3234203d3e20343031363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:6d:66:be:92:56:0a:b3:0a:65:a3:8e:b3:a8:87:55:ab:37:
         d0:17:e6:7c:f8:f4:bb:3f:6e:d1:d8:9c:5b:98:d7:58:3e:d6:
         89:9d:16:0b:dd:67:33:94:cb:c2:37:5c:52:62:5a:29:ab:83:
         87:60:17:62:dd:56:bd:ef:46:6b:0b:d8:ef:2e:fc:36:d9:5a:
         b6:a9:29:d9:a0:e5:68:01:fa:dd:e9:d1:ec:ac:dd:4b:16:d4:
         4e:5a:23:d2:df:4f:fd:a1:fb:12:65:58:b6:9c:4e:f6:97:49:
         42:3f:a8:f7:89:07:15:3f:7a:ad:84:0d:5f:7c:f5:b0:96:a0:
         df:bb:3c:03:38:dd:65:9e:f2:a2:25:ec:71:3c:c0:8a:43:7d:
         2e:4d:e6:16:65:ef:33:a9:bd:35:15:ae:23:d2:19:79:84:a2:
         d1:80:c5:4a:c4:cc:1c:e3:1c:68:e8:09:25:12:6b:d5:c1:34:
         5f:97:df:89:9c:c9:66:78:2d:b1:3e:b2:35:f0:d0:d2:0e:9f:
         62:7a:81:43:aa:26:c2:00:c9:cb:fc:d6:10:1d:21:c2:51:2a:
         02:fb:30:b8:8a:fe:ef:59:86:90:87:d6:df:e5:f1:d3:79:9f:
         b2:e0:bc:42:f9:73:37:91:b5:de:13:db:f6:f2:84:4e:2d:a4:
         e6:1c:09:c8
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUdWcPowonQlepoG+ekUyIRNZFLuowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTg3NDFhYzRmMTIyOTFlOGRkMjkxMTRjZjAwYmFhODll
NGVlNzdkNjQ0YzI5YzhmYWMwHhcNMjUwNTMwMjAyMTEwWhcNMjYwNTI5MjAyNjEw
WjAzMTEwLwYDVQQDEyhGRkJDNUMxODVFQUUzRkJGNEFERkYxQzBGNzI4ODNGNTkz
QjE0MjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWXHnB4hbLJR
97PhSJaij7bNhgCbXsJKwOpS+dbYNMWNIZkXKhLY9MBDWLVlrbycxLGivyPEuBy4
F4lZ+jfGDVB/NKSAxUaJYCB/dSM5O+fwMJMcr4x9k8fbf2/QW0As+HkFYBIh0zQO
evkIwCwzfbMAQqTxbvrPRDtX3iig3Q5gVAeCtJEtsGAU9w0/AvskerGRYJuXIX1H
rzB/zKEGkbK8CJX2QRutrftgw5DcTLfF6pPxGuLn5yM3odZwaq/fhNtbDaUGEGqO
EcPRYtDrutBfjPttzw7choaZ/gK41o/in1Xh5EnX14BFKj1il0YSVvKKOZT6wfbf
s1kWwjCeGQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFP+8XBherj+/St/xwPcog/WT
sUJpMB8GA1UdIwQYMBaAFHojVPCChJhJzQAHtFDkwbH8W5DaMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3LzEv
N0EyMzU0RjA4Mjg0OTg0OUNEMDAwN0I0NTBFNEMxQjFGQzVCOTBEQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzRlOTYyNzE3LTExMzgtNGQyYi05NDQyLTAzMzJlOTA2MDEzMi9lODc0
MWFjNGYxMjI5MWU4ZGQyOTExNGNmMDBiYWE4OWU0ZWU3N2Q2NDRjMjljOGZhYy5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3
NGI0MmNhMTg2Ny8xLzMyMzMyZTMxMzMzNzJlMzIzMzM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzMDMxMzYzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4nsMA0GCSqGSIb3DQEB
CwUAA4IBAQBIbWa+klYKswplo46zqIdVqzfQF+Z8+PS7P27R2JxbmNdYPtaJnRYL
3WczlMvCN1xSYlopq4OHYBdi3Va970ZrC9jvLvw22Vq2qSnZoOVoAfrd6dHsrN1L
FtROWiPS30/9ofsSZVi2nE72l0lCP6j3iQcVP3qthA1ffPWwlqDfuzwDON1lnvKi
JexxPMCKQ30uTeYWZe8zqb01Fa4j0hl5hKLRgMVKxMwc4xxo6AklEmvVwTRfl9+J
nMlmeC2xPrI18NDSDp9ieoFDqibCAMnL/NYQHSHCUSoC+zC4iv7vWYaQh9bf5fHT
eZ+y4LxC+XM3kbXeE9v28oROLaTmHAnI
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:11:27 2025 by rpki-client